Bayview Tuner — Privacy Policy

Last updated: 31 October 2026

Bayview Tuner is a paid Chrome/Brave extension for the browser port of Need for Speed: Underground 2 at nfsu2.xyz. This policy explains what data the extension and its licence service handle. It does not cover Payhip, PayPal, Cloudflare, or nfsu2.xyz; those services have their own policies.

Who is responsible

The seller of Bayview Tuner is the data controller for licence data. Contact: bayviewtuner@gmail.com. The seller's legal name and business address are available on the Payhip receipt and on request.

What the extension handles

• Licence key. The key you receive from Payhip is stored in the browser's extension storage and sent to the licence service to activate and verify it.
• Device ID. The extension generates a random identifier the first time it runs and stores it locally. It is sent with the licence key so the service can count activations and confirm that this device is allowed to use the key. It is not derived from your hardware or browsing history.
• Licence state. Status (active, grace, locked), activation count, maximum activations, last verification time, grace expiry, and the last error are stored locally.
• Game data. Tuning values, cash, car data, and the game's WebAssembly memory are read and written only inside the game tab. They are not sent to the licence service or to the seller.

What the licence service receives

The extension sends the licence key and device ID to the Cloudflare Worker at bayview-tuner-licensing.dgakis1.workers.dev when you activate or verify. The Worker:

• forwards the licence key to Payhip's licence-verification API, using a product secret that is stored only on the server;
• stores a record keyed by a SHA-256 hash of the licence key, containing the device ID, activation timestamps, and active/revoked state;
• may process connection metadata such as your IP address for security and rate limiting as part of normal Cloudflare request handling.

The Worker does not receive your name, email address, payment details, game saves, tuning values, or browsing history. The seller does not receive your payment card details; Payhip and PayPal process the purchase.

Purchase data

Payhip processes the sale and emails your licence key. Payhip and PayPal may collect your name, email address, billing details, and payment information under their own privacy policies. The seller receives the order information Payhip provides to fulfil the licence and support the purchase.

Why the data is used

• to activate and verify a paid licence;
• to enforce the two-device limit and detect refunded or disabled keys;
• to provide support and handle refunds or activation resets;
• to prevent abuse and rate-limit requests.

Legal bases (EEA/UK)

Where GDPR applies, the legal bases are performance of the contract (providing the licensed extension), legitimate interests (security, fraud prevention, and support), and legal obligations (tax and accounting). You can object to processing based on legitimate interests by contacting support.

Retention

Licence records are kept while the key is active and for a reasonable period afterwards to handle refunds, disputes, and re-activation requests. Support emails are kept as long as needed for support and legal records. Local extension data remains until you remove the extension or clear its storage.

Sharing

Data is shared only with the service providers needed to run the product: Cloudflare (Worker and KV hosting), Payhip (checkout, licence keys, receipts), and PayPal (payment processing). The seller does not sell data or use it for advertising.

Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. Contact bayviewtuner@gmail.com with your Payhip order number. You can also complain to your local data-protection authority. Deleting a licence record may make the key unusable until it is re-activated, subject to the two-device limit.

Security

Licence requests use HTTPS. The Payhip product secret is stored only as a Cloudflare secret and is never included in the extension. The extension code is readable by design; the client-side licence check is a speed bump, not a security boundary.

Children

Bayview Tuner is not directed at children under 16. The seller does not knowingly collect data from children.

Changes

This policy may be updated when the product or the law changes. The date at the top will change. Material changes will be noted on the store listing or in the extension's release notes.

Contact

bayviewtuner@gmail.com

Bayview Tuner is not affiliated with EA or nfsu2.xyz.